Go/github.com/weaviate/weaviate CVE-2026-11500: medium 5, EPSS 0.34%
Weaviate has an Improper Authorization issue in github.com/weaviate/weaviate
Action: Upgrade github.com/weaviate/weaviate to 1.38.0-rc.0 or later.
go get github.com/weaviate/weaviate@v1.38.0-rc.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.38.0-rc.0 | - |
Fixed versions
| 1.38.0-rc.0 |
Sources
- osv: GO-2026-6140
- nvd: CVE-2026-11500
- https://github.com/advisories/GHSA-jqpm-wf57-qx5c
- https://github.com/weaviate/weaviate/commit/40f2cc32279f0f8a51016c3c6870a2c0c808e6c0
- https://github.com/weaviate/weaviate/issues/11392
- https://github.com/weaviate/weaviate/releases/tag/v1.38.0-rc.0
- https://vuldb.com/cve/CVE-2026-11500
- https://vuldb.com/submit/835080
- https://vuldb.com/vuln/369120
- https://vuldb.com/vuln/369120/cti
CVE-2026-11500 · published · modified · JSON